Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316630303a3a2f34302d3430203d3e20323632373236.roa
File:                     323830343a35343a316630303a3a2f34302d3430203d3e20323632373236.roa (raw, json)
Hash identifier:          vMJi2Dp9/jtcdoqfoo6AwQ5b3MuBGVBadiv4Sx7d/sY=
Subject key identifier:   5F:C4:57:51:79:4B:F7:88:BB:F2:1D:FA:ED:4E:9A:11:88:21:5D:28
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       3EFFC6F0529A67494FEE3D96BE2EFBBCD9DCC5DC
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316630303a3a2f34302d3430203d3e20323632373236.roa
Signing time:             Thu 09 Mar 2023 22:52:40 +0000
ROA not before:           Thu 09 Mar 2023 22:47:40 +0000
ROA not after:            Thu 07 Mar 2024 22:52:40 +0000
asID:                     262726
IP address blocks:        2804:54:1f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ff:c6:f0:52:9a:67:49:4f:ee:3d:96:be:2e:fb:bc:d9:dc:c5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  9 22:47:40 2023 GMT
            Not After : Mar  7 22:52:40 2024 GMT
        Subject: CN=5FC45751794BF788BBF21DFAED4E9A1188215D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:37:2e:13:d2:00:5e:81:dd:fc:e7:38:96:
                    14:a0:20:89:3e:71:31:aa:64:de:02:ce:70:85:a1:
                    be:3c:31:e5:48:e5:e0:1b:67:b5:14:a8:ac:1d:5c:
                    dc:69:a7:f8:7c:57:91:fb:53:81:e3:f4:ec:92:0d:
                    cc:de:ad:80:d8:21:a8:72:68:f9:31:38:46:0d:d3:
                    5a:e5:62:a0:68:4d:5b:66:71:00:fa:96:bd:54:01:
                    1e:99:9e:9a:63:e9:88:ae:76:e3:82:9e:ce:97:8a:
                    6e:a4:e0:be:60:ac:24:0a:7c:30:45:c7:9b:a9:a6:
                    5d:45:3f:4e:23:d4:95:83:e7:f3:90:86:61:87:39:
                    a3:18:a8:56:67:b5:51:83:1b:80:d3:c3:13:0c:0e:
                    53:03:31:15:9c:07:8e:70:a8:57:6d:bf:17:08:77:
                    dc:24:01:a2:09:0b:f1:71:fc:8f:20:7b:2c:e2:53:
                    fe:87:6b:38:28:77:81:15:81:fc:0c:6a:55:39:3f:
                    65:be:c6:55:35:7f:29:c6:39:35:82:84:c4:35:e5:
                    16:4e:d3:ca:0a:16:3c:c0:01:1d:b2:87:85:ef:44:
                    79:9f:26:0b:e4:67:79:26:67:11:dd:b7:a9:93:0c:
                    d2:c9:2d:d4:71:cd:f1:33:5b:44:4f:b1:dd:9e:36:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C4:57:51:79:4B:F7:88:BB:F2:1D:FA:ED:4E:9A:11:88:21:5D:28
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a316630303a3a2f34302d3430203d3e20323632373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54:1f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:2c:54:64:1d:32:08:1c:cc:29:66:f9:01:92:84:e5:e8:ee:
         9f:ae:5d:c8:b2:f0:3b:57:a9:a8:cc:93:b3:03:ce:6b:4d:1d:
         25:9d:07:b3:1c:b1:8a:7e:2e:7b:4e:4b:2a:c6:63:0c:e0:47:
         fa:68:3b:57:5c:a1:c4:5b:98:2d:c9:b7:f4:d8:6a:23:c7:d6:
         7e:b0:3c:c3:ed:2f:6d:cc:46:30:88:50:f9:92:40:e6:52:97:
         bb:38:76:28:ae:e0:5e:a8:c9:4d:65:ee:3c:e5:c3:43:82:f8:
         27:0b:9b:9a:ed:55:aa:d9:50:30:9a:0d:fe:c5:67:d1:22:a5:
         8f:9a:4e:bd:83:37:be:2d:8e:fd:70:33:51:f6:0e:9b:cc:d8:
         bb:e5:40:98:96:fd:22:04:bf:8a:2d:fd:e5:d9:4f:e0:c3:e5:
         59:b7:6d:dc:14:9c:2b:02:c5:47:bc:40:85:84:ac:e7:5a:b3:
         18:68:e2:ca:51:87:79:35:cd:ee:63:98:fb:03:8e:99:9d:62:
         01:09:8f:b9:1a:96:e7:eb:7c:6e:d6:2a:ca:3d:ef:57:b1:4a:
         58:3a:6a:cc:fe:68:71:ad:59:a8:e2:5e:9c:bb:67:7f:11:a9:
         eb:ad:cf:69:50:6b:4c:c5:ff:49:d0:0c:61:4e:a4:53:7f:26:
         2d:e7:d5:ee
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUPv/G8FKaZ0lP7j2Wvi77vNncxdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyMjM1NDA5OERBOUU4NDQ1QkFEMjQ0NDVGNTZDNTdF
RTYzOEUwRTAeFw0yMzAzMDkyMjQ3NDBaFw0yNDAzMDcyMjUyNDBaMDMxMTAvBgNV
BAMTKDVGQzQ1NzUxNzk0QkY3ODhCQkYyMURGQUVENEU5QTExODgyMTVEMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+azcuE9IAXoHd/Oc4lhSgIIk+
cTGqZN4CznCFob48MeVI5eAbZ7UUqKwdXNxpp/h8V5H7U4Hj9OySDczerYDYIahy
aPkxOEYN01rlYqBoTVtmcQD6lr1UAR6Znppj6YiuduOCns6Xim6k4L5grCQKfDBF
x5uppl1FP04j1JWD5/OQhmGHOaMYqFZntVGDG4DTwxMMDlMDMRWcB45wqFdtvxcI
d9wkAaIJC/Fx/I8geyziU/6Hazgod4EVgfwMalU5P2W+xlU1fynGOTWChMQ15RZO
08oKFjzAAR2yh4XvRHmfJgvkZ3kmZxHdt6mTDNLJLdRxzfEzW0RPsd2eNshzAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUX8RXUXlL94i78h367U6aEYghXSgwHwYDVR0j
BBgwFoAUNiI1QJjanoRFutJERfVsV+5jjg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zNjIyMzU0MDk4REE5RTg0NDVCQUQyNDQ0NUY1NkM1N0VFNjM4RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MjIzNTQwOThEQTlFODQ0
NUJBRDI0NDQ1RjU2QzU3RUU2MzhFMEUuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzIzODMwMzQzYTM1MzQzYTMxNjYzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIw
MzIzNjMyMzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQAVB8wDQYJKoZIhvcNAQELBQADggEB
AJcsVGQdMggczClm+QGShOXo7p+uXciy8DtXqajMk7MDzmtNHSWdB7McsYp+LntO
SyrGYwzgR/poO1dcocRbmC3Jt/TYaiPH1n6wPMPtL23MRjCIUPmSQOZSl7s4diiu
4F6oyU1l7jzlw0OC+CcLm5rtVarZUDCaDf7FZ9EipY+aTr2DN74tjv1wM1H2DpvM
2LvlQJiW/SIEv4ot/eXZT+DD5Vm3bdwUnCsCxUe8QIWErOdasxho4spRh3k1ze5j
mPsDjpmdYgEJj7kalufrfG7WKso971exSlg6asz+aHGtWajiXpy7Z38Rqeutz2lQ
a0zF/0nQDGFOpFN/Ji3n1e4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org